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Human Error 

Reducing Human Errors 

Goal: 

could the designer have improved the user interface to 
reduce the chance of human error? 

Is it worth the effort? 

suppose there are 1 billion personal computer users 

suppose it takes 5 seconds for a user to recover from 1 
error made in 1 day 


= 5 billion seconds spent on error recovery 
= 160 years 




Interaction Problems 


Adobe Illustrator: 

e.g., draw a 2-inch circle with a red boundary 
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Interaction Difficulties 


Gulfs of execution: 

effort to turn intentions into actions 



Types of Human Error 

Mistake: 

involves conscious thought 



forming the wrong goal, decision, or judgment 


e.g., deciding on the wrong version of file to delete 


to address these gulfs , need good visibility and feedback 
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Example Mistake 

USS Greeneville incident: 

collided with and sank Japanese fishing vessel 




Example Mistake 


Space Shuttle Challenger incident: 
disintegrated at 73 s into launch 



social pressure to launch (teacher in space) 
Morton Thiokol managers overrode engineers 


disregarded relevant data 


Rockwell managers did not push their concerns 
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Example Mistake 


American Airlines Flight 965: 
crashed into a 
mountain on the 
approach to Cali, Colombia 


erroneously cleared 
approach waypoints 

entered R for waypoint 
(Rozo intended, 
but Romeo chosen) 


ROZO 1 ARRIVAL 

[Not to scale, terrain not depicted cn 
this schematic ncr in copyrighted chart] 
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[At or above 3900) 


lost situational awareness 


I AIfcnso Bonilla Aragon Airport 

3162 EL 



Types of Human Error 

Slip: 

involves everyday thought 


right goal formed, but doing something unintended during 
the performance 


e.g., typing rn not rm to delete a file 
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Example Slip 

Phobos I spacecraft: 
lost contact 

batteries drained 
solar array misoriented 
no navigational lock 
attitude control turned off 



Causes of Slips 


"Capture error": 

when two different sequences of action begin similarly, and 
the familiar one captures the intended one 


e.g., you get in your car on Saturday to go to the store, but 
end up at work instead 


single character omitted in software upload 
no independent double-check 


Causes of Slips 


Description error": 

when the intended action has much in common with others 
that are possible 


e.g., pouring juice on 
your breakfast cereal, 
rather than milk 
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Causes of Slips 

"Loss-of-activation error": 

when you forget what to do in the middle of an activity 


e.g., you walk from the living room to the bedroom, but 
forget why you are there in the first place 



Causes of Slips 

"Perceptual blindness”: 

when you do not see things that are in 
plain sight 


Causes of Slips 

"Saccadic masking”: 

when your visual perception is blocked during eye 
movement 


e.g., you "lost" the stapler, 
but it is only oriented 
differently from the norm 


more generally, 
inattentional blindness 



e.g., not noticing the window content already scrolled 
because it happened during an eye movement 


Causes of Slips 

"Mode error": 

when you think (or forget) something is in one state, but it 
is actually in another 


e.g., car controls 


e.g., caps lock key 
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Mode Error 


Three Mile Island nuclear plant: 
partial core meltdown 


Minimizing Human Errors 

Designing in the presence of error: 

normal human behavior is not always direct, accurate, or 
rational 


secondary loop issues 
reactor shutdown 
stuck open relief valve 
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misinterpreted relief valve indicator light 

off = powered off, not closed 

not recognizing loss-of-coolant accident 


understand the causes of error and minimize those causes 


how? 


Minimizing Mode Error 

Approaches: 

reduce the number of modes that the user needs to 
understand 


make modes visible and distinctive 


Make Modes Visible 




Keychain Access wants to use the “login" 
keychain. 

Please enter the keychain password. 

Password: | _ ( Q| J 

► Details 

(?) (" Cancel ) ( OK 

caps lock on 









































Make Modes Visible 


Make Modes Visible 
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each tool is a different mode 


how else is the current tool shown? 


Make Modes Distinctive 
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Confirm "Dangerous" Actions 

Confirm: 

but do not overdo it 


user: 

system: 

user: 

system: 

user: 

system: 


remove file "masterpiece" 

are you sure? 

yes 

really? 

yes! 

file "masterpiece" removed 
oops 


user: 

















Confirm "Dangerous" Actions 


Interface Hall of Shame 


Annoying confirmation: 


user: 

quit 

system: 

quit without saving? 

user: 

yes 

system: 

are you sure? 

user: 

yes 

system: 

return to application? 

user: 

no! 


Interface Hall of Shame 

Useless post-process confirmation: 


Annoying confirmation? 
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Interface Hall of Shame 

Don't forget to give a choice: 


Document Wizard Result 

HTML Conversion 

KV 

Press View 1 

complete! 

Result to view rest 

; View Result 1 

jlting documenation. 
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Constraining Actions 

Constraints: 

limitations on actions to prevent problems 
but could become annoying in actual usage 

e.g., clutch down and turn key to start car 
e.g., press brake before shifting out of park 

e.g., pressing brake disengages the accelerator 


Constraining Actions 

Limiting options: 

choose only from valid options 

• e.g., use combo boxes, sliders, spinners, etc. 
gray out options not available in current state 


Interface Hall of Shame 



Improve Feedback 

Detection and correction: 

improve feedback to more easily detect errors 

give feedback on progress of slow operations 

make actions reversible 

validate user data 


in an application crash, 

system suggests corrective actions 
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Simplify 

Reconsider complex mental models: 

explicit saving can create complications 


determining a destination 
user forgetting to save 
auto-save feature 
save before quit alert 
save replace alert 
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Alert Messages 


clear statement of issue and question 


distinctive 

warning 

icon 



“Letter.txt” already exists. Do you want to 
replace it? 

A file or folder with the same name already exists in 
the folder kenw. Replacing it will overwrite its current 
contents. 


Cancel Replace 


situation and 
consequences 



Reduce Human Actions 


Autonomic computing: 
system manages itself 

self-configuring, -healing, -optimizing, -protecting 


Autonomic manager 



■ / 

^ Analyze 


Monitor 

/ Execute 

Knowledge < 




1 Managed resource touchpoint | 


Sensors Effectors 






Managed resource 

© IBM 

38 


Alert Messages 

Guideline: 

rephrase the message as a question 



default choice 
is safe 



39 


© Isys Information Architects 


40 
































Alert Messages 

Guidelines: 

tell the truth in plain terms 


don't SHOUT! 

don't be rude 

don't use the word "error" 

don't highlight dangerous buttons in red 


Alert Messages 

Avoid "violent" language: 
hit 

strike 

punch 

kill 

purge 

execute 

destroy 

boot 


Alert Messages 

Avoid "violent" metaphors: 

... of death! 

system bomb, hang, crash, freeze 


Sorry, a system error occurred. 



(Restart^ 


Alert Messages 

Avoid cryptic messages: 
fatal error 

segmentation fault 

process killed 

core dumped 

kernel panic 


viruses, worms, bugs 
hacking, cracking 
ripping, burning 









Interface Hall of Shame 


Interface Hall of Shame 
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Interface Hall of Shame 



Interface Hall of Shame 
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Isys Information Architects 













































Interface Hall of Shame 



Interface Hall of Shame 
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Reducing Choices 

Approach: 

reduce too many choices 


analysis paralysis 

• overanalyzing a situation to the point of not 
making a decision 
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Human Efficiency 

Hick's Law: 

time to make a decision from a set of choices 
(if subdivision applies) 


average choice reaction time 

• T ~ b log2( n + 1 ) 

• n equally probable choices 

• constant b determined by experiment 

• T~bY<pi log2( l/pi + 1 ) = b • entropy 

• each choice with probability pi 



Human Efficiency 

Fitts's Law: 

time to point to a target object 

• through pointing device or directly 


what does the movement time depend on? 
• size of target and distance to it 
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Targeting 

Fitts's Law: 

average movement time 

• T~a + b\og2(D/W + 1 ) 

• constants a and b determined by experiment 

• distance D from start to center of target 

• width W of target along line of motion 


target 





to reduce T, 
want D low 
and W high 


Menu Targeting Example 


Document - WordPad 


File Edit View Insert Format Help |/J/ =20 pX 


D & B S a J4 


x|%|i 


Anal -» 

J 

|io J 

|Western _*j B / U |) £ JE J |= 

^.. 

• • • 2 

.3 . 4 •••«••• 5. 


D = 200 px 

start 


D 


start 
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top of window menus (Windows) 
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9 TextEdit File Edit 

Format 

W= 80 px 

Window Help 


Untith 




Menu Targeting Example 

Top of window menus: 

T = 50 + 150 log2( 200/20 + 1 ) = 569 ms 


pointer stops 

automatically at the Top of screen menus: 

edge of the screen T = 50 + 150 log2( 200/80 + 1 ) = 321 ms 

effective size is 

D = 200 px larger because you 

do not have to stop 

start precisely within 

the menu bar 


top of screen menus (Mac) 


Fitts's Law 

Question: 

What are the best screen locations to place targets? 


Fitts's Law 

Question: 

Which is typically faster: 

linear popup menu or pie (radial) popup menu? 





















More Information 

Books: 

The Design of Everyday Things 

• D. Norman 

• Doubleday, 1988 

The Invisible Gorilla 

• C. Chabris and D. Simons 

• Broadway, 2011 


More Information 

Books: 

Fatal Defect 

• I. Peterson 

• Vintage, 1995 

GUI Bloopers 

• J. Johnson 

• Morgan Kaufmann, 2000 


More Information 

Links: 

Human Error and the Design of Computer Systems 

• http://www.jnd.org/dn.mss/commentary_human 
_e r ro r_a n d _t h e_d es i g n_of_c o m p u te r_sy ste m s. h t 
ml 


More Information 


Links: 

The RISKS Digest 

• http://catless.ncl.ac.uk/risks 

Interface Hall of Shame 

• http://homepage.mac.com/bradster/iarchitect/shame.ht 
m 


Magic and Software Design 


• http://www.asktog.com/papers/magic.html 


